ET MALWARE TransparentTribe APT Related Backdoor Activity
Sourceet/open
CreatedMarch 28, 2022
UpdatedMarch 16, 2023
Classificationtrojan-activity
alert tcp-pkt $HOME_NET any -> $EXTERNAL_NET 1024: (msg:"ET MALWARE TransparentTribe APT Related Backdoor Activity"; flow:established,to_server; dsize:6; content:"|36 6e 46 74 24 31|"; fast_pattern; reference:md5,bc2ef641fc8d709f4c111937353c0ac2; reference:md5,b03e0568a5f26addc51c8a3e32baeb7f; reference:md5,9dadf9ce41994f869e8c35e1917b8238; classtype:trojan-activity; sid:2035625; rev:3; metadata:created_at 2022_03_28, confidence Medium, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2023_03_16;)
References
| md5 | bc2ef641fc8d709f4c111937353c0ac2 |
| md5 | b03e0568a5f26addc51c8a3e32baeb7f |
| md5 | 9dadf9ce41994f869e8c35e1917b8238 |
Metadata
created at2022_03_28
confidenceMedium
signature severityMajor
tagDescription_Generated_By_Proofpoint_Nexus
updated at2023_03_16
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!